Back

Privacy Policy

Last updated: September 29, 2026

1. Introduction

This policy explains what personal data Nailana collects, why, and what rights you have. The controller of your data is Benita LT, UAB. You can reach us at support@nailana.com.

2. Information We Collect

2.1 Information you give us

  • Email address: when you finish the quiz or buy a plan
  • Quiz answers: age range, skin tone, undertone clues, finger shape, preferred length, shapes and styles, occasion and goals
  • Hand photo: only if you choose to add one
  • Payment details: entered on the payment provider's page. We never see your full card number.

2.2 Information collected automatically

  • Device and browser type, pages visited and quiz steps completed
  • Approximate country, from your IP address
  • Advertising and analytics identifiers, only if you accept cookies

3. How We Use Your Information

  • To provide the Service: build your nail profile, create your previews, salon cards and guides
  • To communicate: send your results, receipts and notices about your plan
  • Marketing: new designs and seasonal looks, only if you ticked the box. You can unsubscribe at any time.
  • To improve the Service: see which quiz steps are unclear and which ads bring visitors

4. Your Hand Photo

4.1 How it is captured

You take the photo with your camera or pick one from your gallery. Before anything is sent, your browser makes it smaller.

4.2 How it is processed

When a preview is made, the photo is sent over an encrypted connection to our image provider, OpenAI, which paints the design onto it and returns the image. Under its API terms, OpenAI does not use this data to train its models.

4.3 Where it is kept

While you take the quiz, your photo and your previews stay in your own browser. When you buy a plan, they are saved in your private Nailana account, together with the photos you add later (your programme check-ins and your nail diary), so you can see them on every device where you sign in. They are stored by our database provider, Supabase, in the EU (Frankfurt), and only you can open them.

4.4 What we will never do

  • Sell your photo or share it with advertisers
  • Use it in ads or show it to other people
  • Use it to identify you or create biometric templates

5. Who We Share Data With

We share data only with the providers that run the Service for us:

  • Stripe: payments
  • Vercel: website hosting
  • Supabase: your account and the data and photos saved in it, stored in the EU (Frankfurt)
  • OpenAI: image generation for your previews
  • Meta Platforms Ireland: ad measurement through the Meta Pixel, only with your consent
  • Microsoft: Clarity usage analytics, only with your consent
  • Our email provider: to send your results and receipts

We may also disclose data when the law requires it.

6. Cookies and Similar Technologies

Necessary: your browser storage keeps your quiz progress, your previews, your cookie choice and, once you have an account, your sign-in, so a refresh does not lose your answers or sign you out.

Optional: the Meta Pixel and Microsoft Clarity load only after you click Accept in the cookie banner. If you choose "Only necessary", they are not loaded.

7. How Long We Keep Data

  • Email and quiz answers: until you ask us to delete them, or 24 months after your last activity
  • Payment records: as long as tax and accounting law requires
  • Hand photos: photos from the quiz alone stay in your browser. Photos in your account are kept until you delete them or your account. Deleting your account removes them at once.

8. Data Security

All data is sent over encrypted connections. Access to personal data is limited to the people who need it to run the Service.

9. Your Rights Under the GDPR

You have the right to:

  • Access the personal data we hold about you
  • Correct data that is wrong
  • Have your data deleted
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time

To use any of these rights, email support@nailana.com. We reply within 30 days. You can also complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

10. Legal Basis for Processing

  • Contract: to provide the Service you asked for
  • Consent: for your hand photo, marketing emails and optional cookies
  • Legitimate interest: to keep the Service secure and improve it
  • Legal obligation: to keep payment records

11. International Data Transfers

Some providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

12. Children

The Service is for people aged 18 and over. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this policy. The date at the top shows the latest version, and we will email you about important changes.

14. Contact Us

Nailana is operated by Benita LT, UAB, Žalgirio g. 122-4 a., LT-09300 Vilnius, Lithuania. Company code 304061473, VAT code LT100009499713. Email support@nailana.com.